Kubernetes Security Best Practices - Ian Lewis, Google

[@domaincontroller]

07:33 Attacking Kubernetes cluster itself, Kubernetes API server 09:01 RBAC 10:58 API Firewall 11:35 NetworkPolicy 13:20 Get access to cluster components, etcd

[@roshelliwanag9447]

Hi Ian. Your presentation is clear and I was able to grasp your ideas easily. Thanks. I am also interested in the remaining topics not covered in your presentation - Threat detection, Build Hygiene and SecOps. Could you recommend good articles or videos regarding those topics? Thanks in advance.

[@devops-boot-camp]

Thanks Ian, it's still relevant in 2021 😃

[@venkatbollimuntha178]

Ian, Thanks so much. Great presentation, and excellent coverage of K8S security best practices.

[@phanikumar1502]

Hello Ian, Rocking presentation which is clear and easy to understand for newbies .

[@tanelikantomaa9540]

Nice! Really good presentation with illustrative pictures. Thanks Ian!

[@wenjieyang2226]

Good presentation, thanks man!!

[@rashmitrathod6873]

Excellent presentation. Very concise in terms on identifying what are possible areas to secure and how to secure for containerized workload running on Kubernetes.

[@wilbertopalomar4187]

Thanks for the excellent presentation Ian. Great parallels on Defense In Depth principle where it underpins the logical flow: Network -> Host -> Supply Chain (Application) -> Data vs. a threat model driven by it (layered defense). Also, it's worth pondering on the importance of Infra Code security first (for those orgamisations mature enough to drive everything via code e.g. Terraform, Crossplane, or ClusterAPI) where it's critical on CI/CD/Progressive Delivery DevSecOps cycle given that it builds entirely on what's being presented.

[@chayanchoudhury6041]

Very helpful..precise..

[@JavierPortillo1]

Thanks for your presentation

[@udayprabhu4751]

Very good talk

[@siavashmohammady9095]

thank you so much

[@nestorreveron]

Thanks

[@ChristianPeper]

👍thanks, even now

[@yongshengyang8144]

Nice topics

[@CloudNativeJanitor]

awesome

[@nah0221]

fruitful !